Site Information
WordPress Version: 6.4.8 VULNERABLE
Theme: zox-news (used by 1,544 domains)
Last Checked: 2026-07-26 22:24:56
HTTPS: Yes
Plugins (14)
| Plugin | Used By |
|---|---|
| advanced-ads | 18,226 |
| advanced-ads-layer | 1,408 |
| advanced-ads-pro | 4,482 |
| advanced-ads-responsive | 278 |
| advanced-ads-slider | 1,131 |
| advanced-ads-sticky-ads | 1,420 |
| advanced-ads-tracking | 3,131 |
| block-options | 5,535 |
| click-to-chat-for-whatsapp | 61,872 |
| feeds-for-youtube | 11,995 |
| instagram-feed | 225,606 |
| speed-up-lazy-load | 140 |
| theia-sticky-sidebar | 2,022 |
| zox-alp | 914 |
Security Headers
F
Grade F
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.4.8) — CVE-2024-4439: Unauthenticated Stored XSS. Update to 6.5.2 or later immediately.
- error_log exposed — PHP errors publicly visible ?
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.